fix: remove em dashes from firewall reasons and seed (correct Space root paths)

Swap demo seed to generic taskflow-api sample; refresh queries; generalize secret hydration

Deploy ContextFirewall backend (FastAPI + Cognee, local stores)